Business Continuity Planning Flashcards
7 cards from real CISA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity Planning flashcards as text
Which of the following is the PRIMARY responsibility of executive management regarding business continuity planning?
Answer: Sponsoring and approving the BCP program and providing adequate resources
Executive management's primary BCP role is governance: providing leadership commitment, funding, and policy approval for the overall program.
An organization is selecting between cloud-based disaster recovery and a traditional hot site. A key ADVANTAGE of cloud-based DR is:
Answer: Scalable resources and reduced capital expenditure
Cloud-based DR offers on-demand scalable resources and shifts capital expenditure to operational expenditure, reducing upfront infrastructure costs.
A company stores backup media at a facility 2 miles from the primary data center. An IS auditor's MAIN concern would be:
Answer: The proximity may mean both sites are affected by the same regional disaster
Offsite storage must be far enough away to avoid being impacted by the same disaster (flood, hurricane, earthquake) that affects the primary site.
Which of the following components is MOST important to include in the emergency response phase of a BCP?
Answer: Employee evacuation and immediate safety procedures
The emergency response phase prioritizes human safety and immediate crisis containment before addressing IT recovery or financial concerns.
An IS auditor finds that a company's BCP does not address pandemics or widespread illness. Based on BCP best practices, this is:
Answer: A gap, since BCPs should address all threats identified in the risk assessment including people-centric disasters
BCPs must address a range of disruption scenarios including pandemics, which primarily affect personnel availability rather than physical infrastructure.
What is the role of the BCP coordinator during the plan maintenance phase?
Answer: Ensuring the plan is regularly reviewed, updated, and tested after changes to the business
The BCP coordinator is responsible for keeping the plan current by scheduling reviews, incorporating organizational changes, and tracking test results.
Which of the following BEST describes a 'cold site' recovery option?
Answer: A site with basic infrastructure (power, cooling, network) but no pre-installed hardware or data
A cold site provides only basic physical infrastructure; equipment must be procured and installed after a disaster, resulting in longer recovery times.